CVE-2022-26954: URL Redirection to Untrusted Site

Multiple open redirect vulnerabilities in NopCommerce 4.10 through 4.50.1 allow remote attackers to conduct phishing attacks by redirecting users to attacker-controlled web sites via the returnUrl parameter, processed by the 1 ChangePassword function, 2 SignInCustomerAsync function, 3...

NopCommerce input validation vulnerability

nopCommerce is an open source general purpose e-commerce platform. A security vulnerability exists in nopCommerce versions 4.10 to 4.50.1, which is caused by an open redirection in the ChangePassword function, SignInCustomerAsync function, SuccessAuthentication method, and NopRedirectResultExecut...

PT-2022-18140

Name of the Vulnerable Software and Affected Versions NopCommerce versions 4.10 through 4.50.1 Description The issue allows remote attackers to conduct phishing attacks by redirecting users to attacker-controlled web sites via the returnUrl parameter. This parameter is processed by several...